693 matches found
Sql injection
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...
CVE-2020-21133
CVE-2020-21133 is a SQL injection vulnerability in MetInfo 7.0.0 beta, located in member/getpassword.php?lang=cn&a=dovalid. Root cause: lack of validation of externally entered SQL statements, allowing an attacker to execute arbitrary SQL commands. Documented impact includes high confidentiality,...
CVE-2020-21133
SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid...
CVE-2020-21132
MetInfo 7.0.0beta SQL injection in index.php is exposed. The vulnerability stems from lack of validation of externally entered SQL statements, allowing an attacker to execute arbitrary SQL. CVSS details indicate high to critical impact across confidentiality, integrity, and availability (C:H, I:H...
CVE-2020-21132
SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...
CVE-2020-21131
MetInfo 7.0.0 beta CMS contains a SQL injection in the language web add language function (admin/?n=language&c=language_web&a=doAddLanguage). Root cause: inadequate input validation leading to arbitrary SQL execution. Affected product/version: MetInfo 7.0.0 beta (PHP/MySQL). Impact per sources: p...
CVE-2020-21131
SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=languageweb&a=doAddLanguage...
Metinfo MetInfo SQL注入漏洞
Metinfo MetInfo is a content management system CMS developed by China Metinfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo, which originates from the product's admin/?n=language&c=languageweb&a=doAddLanguage does not securely validate user input data, and can be exploited ...
Metinfo MetInfo SQL注入漏洞
Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in getpassword.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An...
Metinfo MetInfo SQL注入漏洞
Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in index.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker ca...
MetInfo SQL Injection Vulnerability (CNVD-2021-59068)
Metinfo is a content management system CMS developed using PHP and Mysql by China's Mito Metinfo. A SQL injection vulnerability exists in Metinfo 7.0, which can be exploited by attackers to access sensitive database information...
CVE-2020-20585
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information...
CVE-2020-20585
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information...
Sql injection
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information...
CVE-2020-20585
CVE-2020-20585 is a SQL injection vulnerability affecting MetInfo CMS 7.0 beta. The issue is described as a blind SQL injection in the admin path (/admin/?n=logs&c=index&a=dode) that can lead to access to sensitive database information. Connected sources (CNVD, NVD, Red Hat, CVE List, CNVD varian...
CVE-2020-20585
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information...
Metinfo MetInfo SQL注入漏洞
Metinfo is a content management system CMS developed using PHP and Mysql by China's Mito Metinfo. A SQL injection vulnerability exists in Metinfo 7.0, which can be exploited by attackers to access sensitive database information...
MetInfo Cross-Site Scripting Vulnerability (CNVD-2021-49143)
MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo. The vulnerability can be exploited to conduct cross-site scripting attacks via the gourl parameter in login.php...